Lucene search
+L

441 matches found

RedhatCVE
RedhatCVE
added 2021/03/25 1:0 a.m.29 views

CVE-2021-23981

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

8.1CVSS1.5AI score0.01135EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/03/25 12:0 a.m.43 views

RHEL 8 : firefox (RHSA-2021:0989)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0989 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

9.8CVSS8.1AI score0.01404EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
added 2021/03/25 12:0 a.m.38 views

RHEL 8 : thunderbird (RHSA-2021:0995)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0995 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.9.0. Security Fixes: Mozilla:...

9.8CVSS8.1AI score0.01404EPSS
SaveExploits1References11
OSV
OSV
added 2021/03/24 12:0 a.m.11 views

UBUNTU-CVE-2021-23981

A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

8.1CVSS7.4AI score0.01135EPSS
SaveExploits0References8
Veracode
Veracode
added 2020/09/21 6:39 a.m.28 views

Out-of-bounds (OOB) Read

firefox:trusty is vulnerable to out-of-bounds read. It can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed buffers...

9.8CVSS3.2AI score0.01792EPSS
SaveExploits0References3Affected Software3
Mozilla
Mozilla
added 2020/07/28 12:0 a.m.60 views

Security Vulnerabilities fixed in Firefox ESR 68.11 — Mozilla

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. WebRTC used the memory address of a class instance as a connection identifier. Unfortunately, this value is...

9.3CVSS2AI score0.0779EPSS
SaveExploits6References6Affected Software1
RedHat Linux
RedHat Linux
added 2020/04/16 10:8 a.m.5 views

Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method

The Mozilla Foundation Security Advisory describes this flaw as: When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially...

7.5CVSS7.3AI score0.01468EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/04/08 1:37 p.m.5 views

Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method

The Mozilla Foundation Security Advisory describes this flaw as: When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially...

7.5CVSS7.3AI score0.01468EPSS
SaveExploits0References5
CNVD
CNVD
added 2020/02/21 12:0 a.m.4 views

virglrenderer vrend_renderer.c resource management error vulnerability

virglrenderer is a VirGL virtual OpenGL renderer. virglrenderer 0.8.1 and earlier versions have a resource management error vulnerability in the vrendrenderer.c file. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or...

5.5CVSS6.7AI score0.0034EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/27 5:15 a.m.26 views

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

5.5CVSS5.6AI score0.0034EPSS
SaveExploits0References5
OSV
OSV
added 2020/01/27 5:15 a.m.1 views

DEBIAN-CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

5.5CVSS5.8AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/27 5:15 a.m.10 views

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

5.5CVSS7.3AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2020/01/27 5:15 a.m.70 views

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

5.5CVSS4.8AI score0.0034EPSS
SaveExploits0
Prion
Prion
added 2020/01/27 5:15 a.m.23 views

Double free

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

2.1CVSS5.4AI score0.0034EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2020/01/27 5:15 a.m.33 views

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

5.5CVSS6.4AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/27 5:15 a.m.5 views

UBUNTU-CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

5.5CVSS6.6AI score0.0034EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/01/27 12:0 a.m.32 views

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

6.1AI score0.0034EPSS
SaveExploits0References5
CVE
CVE
added 2020/01/27 12:0 a.m.124 views

CVE-2020-8003

CVE-2020-8003 applies to virglrenderer, specifically a double-free in vrend_renderer.c that can cause a denial of service when a texture allocation fails. The root cause is that vrend_renderer_resource_allocated_texture is not an appropriate place for a free. Public documentation in the connected...

5.5CVSS5.4AI score0.0034EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2020/01/27 12:0 a.m.52 views

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

5.5CVSS5.4AI score0.0034EPSS
SaveExploits0
OSV
OSV
added 2020/01/08 7:15 p.m.5 views

CVE-2020-0004

In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS6.7AI score0.00148EPSS
SaveExploits0References1
Rows per page
Query Builder